Debian/fossil: high 7.5
Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.
Action: Upgrade fossil to 1:2.15.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.15.2-1 | - |
Fixed versions
| 1:2.15.2-1 |
Sources
- osv: DEBIAN-CVE-2021-36377#Debian:13/fossil
- https://security-tracker.debian.org/tracker/CVE-2021-36377
published · modified · JSON